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CLASSIFIED DECLARATION OF FRANCES J. FLEISCH 
NATIONAL SECURITY AGENCY 

(U) I- Frances J. Fleiseh. do hereby slate and declare as follows: 

1. (U) Introduction 

I . (U) I am the Executive Director lor the National Security Agency (NS A), an 

intelligence agency within the Department of Defense. 1 have held this position since June 2010. 
As the Executive Director. I serve as an adjunct to the Deputy Director for all NSA matters. 
Under our internal regulations, and in the absence of the Director and Deputy Director. I am 
responsible for directing the NSA. overseeing the operations undertaken to carry out its mission 
and. by specific charge of the President and the Director ol National Intelligence, protecting NSA 
activities and intelligence sources and methods. I have been designated an original TOP SECRE' 
:lassification authority under Executive Order No. 13526. 75 Fed. Reg. 707 (2009) and 
Department of Defense Directi\e No. 5200 I -R. Information and Security Program Regulation. 

52 C.F.R. § 159a. 1 2 (2000). 

2. (U) I he purpose of this declaration is to support an assertion of the military and 

>tate secret s privilege (hereafter, “state secrets privilege ') by the Director of National Intelligence 
V% DNI* % ) as the head of the Intelligence Community, as well as the DNFs assertion of a statutory 
privilege under the National Security Act. to protect information related to NSA activities 
lescribed herein below. General Keith B. Alexander, the Director of the National Security 
\gcncy. has been sued in his official and individual capacity in the above captioned litigation anc 
tas recused himself from the decision on whether to assert privilege in his official capacity. As 
he Executive Director, and by specific delegation of the Director, I am authorized to review the 
naierials associated with this litigation, prepare whatever declarations l determine are 
ippropriate. and determine whether to assert the NSA‘s statutory pri\ilege. Through this 
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declaration, I hereby invoke and assert the NSA's statutory privilege set forth in Section 6 of the 

National Security Agency Act of 1959, Public Law No. 86-36 (codified as a note to 50 ILS.C. § 
402) ("NBA Act”), to protect the information related to NBA activities described herein below. 
The statements made herein are based on my personal knowledge of NS A activities and 
operations, and on information made available to me as the Executive Director of the NSA. ! 

1L (II) Summary 



3. (U) In the course of my official duties, 1 have been advised of the above-captioned 

Jewel. Shuheti. and hi re NS A Telecommunications Records Lid gad on. and 1 have reviewed the 
allegations raised in this litigation, including the Complaint filed in the Jewel action on September 
I S, 2008, and the Second Amended Complaint ("SAC”) filed in the above-referenced Shuhert 
action on May 8. 20 12 . 1 In sum, plaintiffs allege that, after the 9/1 1 attacks, the NBA received 
presidential authorization to engage in "dragnet” communications surveillance in concert with 
major telecommunications companies. See. e g.. Jewel CompL ^ 2-3; Shubert SAC Hit 1-7, 
Plaintiffs allege that the presidenually-authorized acti vities at issue in this litigation went beyond 
the ' Terrorist Surveillance Program” (“TSP”). which was publicly acknowledged by the President 



E (V) This declaration addresses and asserts privilege with respect to allegations raised in 
he above-captioned Jewel action as well as a separate action —- Shubert v. Obama (07-cv-00693), 
'n addition, the harm to national security that would result from the disclosure of NS A sources 
and methods described herein is applicable to similar allegations concerning NS A activities 
aised in other lawsuits in In re NS A Telecommunications Records Litigation (M:Q6-cv-l791 ) 



^ TGfffilffOC/N V) Starling in 2006, the Director of National Intelligence, supported by 
declarations from the NBA like this one, has asserted the state secrets privilege and related 
statutory privileges concerning NBA intelligence sources and methods in several other cases that 
have been before this court, including in a 2006 lawsuit brought by the plaintiffs in Jewel against 
AT&T (Hepfing v. AT&T) (O6-cv-0O672), as well as in 2007 with respect to lawsuits brought 
against Verizon Communications * and again in 2007 and 2009 in the Shubert action, and also in 
2009 in the Jewel action. This declaration concerns the same sources and methods that were at 
issue in those prior declarations, and sets forth substantially the same facts and harms to national 
security previously described to the court. In light of the passage of time, this submission 
updates, expands upon, and supplants prior privilege assertions in this litigation. 
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in December 2U05 and was limited to the interception of specific international communication^ 

involving persons reasonably believed to be associated with al Qaeda and affiliated terrorist 
organizations. Rather, plaintiffs allege that other intelligence activities were also authorized by 
the President after 9/1 1. and that, with (lie assistance of telecommunication companies, including 
A I <& I and Verizon, line NSA has indiscriminately intercepted the content and obtained the 
communications records of millions of ordinary Americans as part of an alleged presidential ly- 
authorized "Program*’ after 9/1 1. See ./core/ Compl. Cf 2-13; 39-97; Shubert SAC 1]1! 1-7: 57-58: 
60-91. 

4. (U) 1 cannot disclose on the public record the specific nature of NSA information 
or activities implicated by the plaintiffs' allegations. As described further below, the disclosure 
of information related to (he NSA’s activities, sources, and methods implicated by the plaintiffs’ 
allegations reasonably could be expected to cause exceptionally grave damage to the national 
security of the United States. In addition, it is my judgment that sensitive state secrets are so 
central to die subject matter of die litigation that any attempt to proceed in the case risks 
disclosure of the classified privileged national security information described herein and 
exceptionally grave damage to the national security of the United States. 

5. The allegations in this lawsuit put at issue the 
disclosure of information concerning several highly classified and critically important NSA 
intelligence acti\ ilics, sources and methods that commenced under presidential authorization 
after the 9/1 I terrorist attacks, but which were later transitioned to the authority of the Foreign 
Intelligence Surveillance Act ( ‘FISA"), including ongoing activities conducted under orders 
approved by the Foreign Intelligence Surveillance Court {"FISC"). 3 As described in more detail 



As described further below, pursuant to the FISA and 
tpccilic orders of the FISC, the intelligence activities that NSA carries out under the authoriU of 
he FISA and authorization of the FISC are classified, NSA’s FISC-approved activities that are 
it issue here are classified at the TOP SFX'Rl T//COMTN I level as their unauthorized disclosure 
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below, starting in October 2001, then- Pres iden^usrmssued a presidential authorization that 

directed the NSA to undertake three discrete activities after the 9/1 I attacks that were designed 

to enhance NSA's capability to detect and prevent further attacks. (Collectively these activities 

were designated by (he NSA code-name "STELLAR WIN DC) 

A. (TSimdVdjl//OCOIL) Basket L ~ Cynic ni CoUectiorr . The first presidential ly- 
authorized activity after the 9/1 1 attacks was the collection of the content 1 of 
certain international communications (telephone and Internet) reasonably believed 
to involve a member of a terrorist organization. From the outset (his activity was 
limited by the NSA to "one-end international" communications - that is, to or 
from the United States. This content collection activity was directed at groups 
engaged in international terrorism and, starting March 2004, was limited to 
international communications reasonably believed to involve an individual 
associated specifically with a I Qaeda or its affiliated organizations. When 
publicly acknowledged in December 2005, this content collection activity was 
referred to as the “Terrorist Surveillance Program." The TSP authorization ended 
in February 2007 and was initially replaced by orders of the FISC, which were 
later supplanted by Congressional amendments to the FISA that authorized the 
NSA to collect certain communications of non-U. S. persons located overseas. 

B. Bushel 2 - Telephony Mela Data : The second 
activity undertaken by the NSA after the 9/1 1 attacks, pursuant to the same 
presidential authorization, entailed the bulk collection of telephony "meta data" - 
which is information derived from call detail records that reflects, but is not 
limited to, the date, time, and duration of telephone calls, as well as the phone 
numbers used to place and receive the calls. As described below, this activity was 
transitioned to an order of the FISC starting in May 2006 and. while subject to 
subsequent modification by the FISC, remains in place today. 

C. (T.V/ "I Boskfi 3 - In! erne! Mela Paid: . The third 

activity undertaken by the NSA after the 9/1 1 attacks, again pursuant to the same 
presidential authorization, was the bulk collection of Internet meta data, which is 
header/router/addressing information, such as the “to, 1 ' “from,’' "cc," and “bcc” 
lines on an email, as opposed to the content or subject lines of a standard email. 

As described below, this activity was transitioned to an order of the FISC slatting 
in July 2004 until December 2011, when NSA decided not to seek reauthorization 
of this activity.' 



could reasonably be expected to cause exceptionally grave damage to the national security of the 
United States. 



The term “content” is used herein to refer to the substance, meaning, 
or purport of a communication, as defined in 18 U.S.C. § 2510(8). as opposed to the type of 
addressing or routing information referred throughout this declaration as “meta data." 
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6. E 0 C/N F ) Plaintiffs' allegations put at issue all three NSA activities 

originally authorized by the President after the 9/ 1 1 attacks and later transitioned to FISA 
authority. For example, plaintiffs in both the Jewel and S/mherf actions allege that the NSA was 
authorized by the President to engage in a communications "dragnet" after 9/1 1 that included the 
indiscriminate collection of the content of millions of telephony and Internet communications. 
See Jewel Corn pL 7, 9, 73, 74, 8 1 ; Shubert SAC 7, 70, 84, This al legation of a content 
’dragnet' is false, however. The N$A‘s collection of the content of communications (/>., the 
substance, meaning or purport of the communication) under the post 9/1 ] presidential 
authorization was directed at one-end international communications in which a participant was 
reasonably believed to be associated with a group engaged in international terrorism (later 
limited to al Qaeda and its affiliates), and was focused on specific ''selectors" {such as phone 
numbers and Internet addresses) believed to be associated with such individuals- The content 
surveillance authorized therefore did not constitute the kind of "'dragnet" collection of the 
content of millions of Americans' telephone or Internet communications that the plaintiffs allege. 
Incised, ’ sci inn h I A v. m 



I Howe’, er, the operational details oft lie i NP :.md oihcr 

NSA content collection activities could not be disclosed to address, disprove, or otherwise 
litigate the plaintiffs' allegation of a content "dragnet” without causing exceptional harm to 
NSA's sources and methods of gathering intelligence— including methods currently used to 
detect and prevent fun her terrorist attacks under the authority of the FISA, 

7. Similarly, plaintiffs* allegations that the NSA has 

collected certain non-content information {i e., meta data) about telephone and Internet 
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communications cannot be addressed without risking or requiring disclosure of highly sensitive 

sources and methods that continue to be utilized today and causing exceptionally grave damage 
to national security. As explained below, the bulk collection of meta data enables highly 
sophisticated analytical tools that can uncover the 
members or agents ol 

8. (Tfl//T3P/i f 3I> | W>C/N R In addition, plaintiffs' allegation that 

telecommunications carriers, including AT&T (at issue in Jewel) and Verizon (at issue in 
Shuberi), and other carriers at issue in other lawsuits in In re NSA Telecommunications Record 
Li (I gal ion, assisted the NSA in alleged intelligence activities cannot be confirmed or denied 
without risking exceptionally grave damage to national security. Because the NSA has not 
jndertaken the alleged '"dragnet" collection of communications content, no carrier has assisted in 
lui alleged aenvM) . | 
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below, the DNI's stale secrets and statutory privilege assertions, and my own statutory privilege 
assertion on behalf of the NS A, seek to protect against the disclosure of the highly classified 
intelligence sources and methods put at issue in this case, including: ( l ) any information that 
would lend to confirm or deny whether particular individuals, including the named plaintiffs, 
have been subject to the alleged NS A intelligence activities: (2) information concerning NS A 
intelligence sources and methods, including fuels demorisiruting that the content collection under 
the ISP was limited to terrorist-related international communications, and that NS A did not and 
does not otherwise engage in plaintiffs' alleged content surveillance ''dragnet - ': (3) facts that 
would tend to confirm or deny the other intelligence activities authorized by the President after 
0/1 1 and later transitioned to the authority of the FISA - that is, existence of the NSA's bulk 
meta data collection, and any iu formation about those activities: and (4) the tact that; 

In 




particular, the fact that there has been public speculation about alleged NS A activities, including 
in media reports, books, or plaintiffs* declarations, does not diminish ihe need to protect 
intelligence sources and methods from further exposure* 1 he process of sorting out what is true, 
partly true, or wholly false in public repons or in plaintiffs' allegations and declarations, would 
necessarily risk or require disclosure of what in fact the NS A has undertaken, when. how. and 
jnder what authority. As set forth herein, such official confirmation and disclosure of classified 
privileged national security information by the Government would remove any doubt as to 
MSA’s actual sources and methods, confirm to our adversaries what channels of communication 
,o avoid, and cause exceptionally grave damage to the national security. For these reasons, as set 
onh further below. I request that the Court uphold the DNI's state secrets and statutory privilege 
issenions* as well as the NS A statutory pri\ ilege assertion that 1 now raise, and protect the 
nfnrmaiinn described in this declaration from disclosure. 
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III. (U) Classification of Declaration 

12. HftimmF) This declaration is classified TOP SECR£T//TSP//SlB 
I'VORCON/NOFORN pursuant to the standards in Executive Order No. 13526. See 75 Fed. 

Reg. 707 (Dec. 29, 2009). Under Executive Order No. 13526. information is classified 'TOP 
SECRET" if unauthorized disclosure of the information reasonably could be expected lo cause 
exceptionally grave damage to the national security of the United Sates; "SECRET" if 
unauthorized disclosure of the information reasonably could be expected to cause serious 
damage to national security: and "CONFIDENTIAL" if unauthorized disclosure of the 
information reasonably could be expected to cause identifiable damage to national security. At 
the beginning of each paragraph of this declaration, the letter or letters in parentheses 
designate(s) the degree of classification of the information the paragraph contains. When used 
for this purpose, the letters TJ," "CT “ST and “TS V indicate respectively that the information is 
either UNCLASSIFIED, or is classified CONFIDENTIAL. SECRET, or TOP SECRET . 7 

13. (UffPOU©) Additionally, this declaration also contains Sensitive Compartmented 
Information (SCI), which is '"information that not only is classified for national security reasons 
as Top Secret, Secret, or Confidential, but also is subject to special access and handling 
requirements because it involves or derives from particularly sensitive intelligence sources and 
methods.” 2S C.F.R. § 1 7. 1 8(a). Because of the exceptional sensitivity and vulnerability of such 
information, these safeguards and access requirements exceed the access standards that are 
normally required for information of the same classification level. Specifically, this declaration 
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references communications intelligence (COMFNT), also referred (o as special intelligence (SI), 
which is a subcategory of SGI. COMINT or SI identif ies SCI that was derived from exploiting 
cryptographic systems or other protected sources by applying methods or techniques, or from 
foreign communications. 

14. Th i s declaration also contains information 

related to or derived from the STELLAR WIND program, a controlled access signals intelligence 
program under Presidential authorization created in response to the attacks of 9/1 1 . In this 
declaration, information pertaining to the STELLA.RWIND program is denoted with the special 
marking ”TSP” and requires more restrictive handling * Despite the December 2005 public 
acknowledgment of the TSP, details about the PSP program as well as the STELLAR WIND 
program in its entirety, remain highly classified and strictly compartmenied. I 



pQCffMPJ Information pertaining to the STELLAR WIND 
program can also be denoted with the special marking "STL WT In prior declarations and 
briefing materials. NS A has used the "TSP" designation to refer to the portion of the program 
that was publicly disclosed by then-President Bush in December 2005. 
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1 5. (LJ) Jn addition to the fact thamassmed information contained herein may not be 

revealed to any person without authorization pursuant to Executive Order 13526, this declaration 
contains information that may not be released to foreign governments, foreign nationals, or non- 
ELS. citizens without permission of the originator and in accordance with DNI policy. This 
information is labeled “NOFQRNT The "ORCON“ designator means that the originator of the 
information controls to whom it is released. 

IV, f If ) Background In forma rion 

A, (V) The National Security Agency 

16. (U) The NSA was established by Presidential Directive in 1952 as a separately 
organized agency wmhirt the Department of Defense. The NSA*s foreign intelligence mission 
includes the responsibility to collect, process, analyze, pjoduce, and disseminate signals 
intelligence (81GIMT) information, of which communications intelligence ('TOM! NT") is a 
significant subset, for (a) national foreign intelligence purposes, (b) counterintelligence purposes, 
and (c) the support of military operations. See Executive Order 12333, § 1 .7(c), as amended. 

17. Signals intelligence (SlGfNT) consists of three subcategories: 

( 1) communications intelligence (COfvIfNT): (2) electronic intelligence (ELfNT): and (3) foreign 
instrumentation signals intelligence (FiSINT). Communications intelligence (COMINT) is 
defined as "all procedures and methods used in the interception of communications and the 



M) 




111 (U) Executive Order 1 2333, reprinted as amended in 50 U.8.C § 401 note, generally 
describes (he NSA's authority to collect foreign intelligence that is not subject to the FiSA 
definition of electronic surveillance, including activities undertaken abroad. Section 1 .7(c) of 
E.Q. 12333, as amended, specifically authorizes the NSA to ^Collect (including through 
clandestine means), process, analyze, produce, and disseminate signals Intelligence information 
for foreign intelligence and counterintelligence purposes to support national and departmental 
missions/' 
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obtaining of information from such communications by other than the intended recipients," 1 8 
U.'S,C, § 798. COMFNT includes information derived from the interception of foreign and 
international communications, such as voice, facsimile, and computer-to-computer information 
conveyed via a number of means 

I Electronic intelligence (EL [NT) is technical intelligence information derived from 
foreign non-communications electromagnetic radiations except atomic detonation or radioactive 
sources— in essence, radar systems affiliated with military weapons platforms (e g., anti -ship) 
and civilian systems (e,g.< shipboard and air traffic control radars). Foreign instrumentation 
signals intelligence (FISFNT) is derived from the intercept of foreign electromagnetic emissions 
associated with the testing and operational deployment of non-U. S. aerospace, surface, and 
subsurface systems, 

18. (U) The NSA's SIGfNT responsibilities include establishing and operating an 
effective unified organization to conduct SIGINT activities set forth in Executive Order No, 
12333, § 1 /7(c)(2), as amended. In performing its SIGfNT mission, NS A has developed a 
sophisticated worldwide SIGINT collection network that acquires, among other things, foreign 
and international electronic communications and related information* The technological 
infrastructure that supports the NSA's foreign intelligence information collection network has 
taken years to develop at a cost of billions of dollars and untold human effort. It relies on 
sophisticated collection and processing technology. 

19. (IJ) There are two primary reasons for gathering and analyzing foreign 
intelligence information. The first, and most important, is to gain information required to direct 
IT S, resources as necessary to counter external threats and in support of military operations. The 
second reason is to obtain information necessary to the formulation of LhS. foreign policy. 
Foreign intelligence information provided by the NS A is thus relevant to a wide range of 
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imporiani issues, including military order ol DauleHhrcai warnings and readiness; arms 
proliferation; international terrorism: counter-intelligence: and foreign aspects of international 
narcotics trafficking. 



20. (U) The NSA’s ability to produce foreign intelligence information depends on its 
access to foreign and international electronic communications- Foreign intelligence produced b\ 
COMIN f activities is an extremely important part of the overall foreign intelligence information 
available to the l nited States and is often unobtainable by other means. Public disclosure of 
either the capability to collect specific communications or the substance of the information 
derived from such collection itself can easily alert targets to the vulnerability of their 
communications. Disclosure of even a single communication holds the potential of revealing 
intelligence collection techniques that are applied against targets around the world. Once alerted 
targets can frustrate COMrNT collection by using different or new encryption techniques, by 
disseminating disinformation, or by utilizing a different communications link. Such evasion 
techniques may inhibit access to the target's communications and therefore deny the United 
states access to information crucial to the defense of the l nited States both at home and abroad. 
COMITslT is provided special statutory protection under 1 8 U.S.C. § 798, which makes it a crime 
:o knowingly disclose to an unauthorized person classified information "concerning the 
:ommunication intelligence activities of the United Slates or any foreign government/' 

B. (U) September 1 l, 2001 and the al Qaeda Threat 

21. (U) On September 1 1, 2001. theal Qaeda terrorist network launched a set of 
coordinated attacks along the East Coast of the United States. Four commercial jetliners, each 
:arefully selected to be fully loaded with fuel for a transcontinental llight. were hijacked by al 
)aeda operatives. Those operatives targeted the Nation's financial center in New York with two 
>f the jetliners, which thev deliberately Hew into the Twin Towers of ihe World I rade Center. 
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Al Qaeda targeted the headquarters of the Nation's Armed I orees. the Pentagon, with die third 
jetliner. Al Qaeda operatives were apparent!} headed toward Washington, D.C. with the fourth 
jetliner when passengers struggled with the hijackers and the plane crashed in Shanksville, 
Pennsylvania. The intended target of this fourth jetliner was most evidently the While Mouse or 
the Capitol* strongly suggesting that al Qaeda's intended mission w'as to strike a decapitation 
blow' to the Government of the United States — to kill the President, the Vice President, or 
Members of Congress. The attacks of September I 1 resulted in approximately 3.000 deaths — 
the highest single-day death toll from hostile loreign attacks in the Nation's history'. In addition, 
these attacks shut dowm air travel in the United Slates, disrupted the Notion's financial markets 
and government operations, and caused billions of dollars of damage to the economy. 

22. (U) On September 14. 2001. a national emergency was declared “by reason of the 

terrorist attacks at the World I rude Center. New York. New York, and the Pentagon, and the 
continuing and immediate threat of further attacks on the I nited States.*' Presidential 
Proclamation No. 7463. 66 Fed. Reg. 48199 (Sept. 14. 2001 ). The United States also 
immediately began plans for a military response directed at al Qaeda's training grounds and 
havens in Afghanistan. On September 14, 2001, both Houses of Congress passed a Joint 
Resolution authorizing the President of the United States “to use al) necessary and appropriate 
force against those nations, organizations, or persons he determines planned, authorized, 
committed, or aided the terrorist attacks" of September 1 1 . Authorization for Use of Military 
Force. Pub. L No. 107-40 § 21(a). 1 15 Stai. 224. 224 (Sept. 18. 2001) (“Cong. AuthT). 

Congress also expressly acknowledged that the attacks rendered it “necessary and appropriate" 
for the United States to exercise its right “to protect United States citizens both at home and 
abroad." and acknowledged in particular that “the President has authority under the Constitution 
to take action to deter and prevent acts of international terrorism against the United States." /</. 
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23. (U) As a result of the unprecedented attacks of September 1 1 , 200 K the United 

States found itself immediately propelled into a conflict with al Qaeda and its associated forces, a 
set of groups that possesses the evolving capability and intention of inflicting further attacks on 
the United States, That conflict is continuing today, at home as well as abroad. Moreover, the 
conflict against al Qaeda and its allies is a very different kind of conflict- against a very different 
enemy, than any other conflict or enemy the Nation has previously faced. Al Qaeda and its 
affiliates operate not as a traditional nation-state but as a diffuse, decentralized network of 
individuals, cells, and loosely associated, otien disparate groups, that act sometimes in concert, 
sometimes independently* and sometimes in the United States, but always in secret — and their 
mission is to destroy lives and to disrupt a way oflife through terrorist acts. Al Qaeda works in 
the shadows: secrecy is essential to al Qaeda's success in plotting and executing its terrorist 
attacks. 




11 (U) Following the 9/1 1 attacks, the United States also immediately began plans fora 
military response directed al al Qaeda's training grounds and havens in Afghanistan. A Military 
Order was issued slating that the attacks of September 1 1 '"created a state of armed conflict,” see 
Military Order by the President § 1(a). 66 Fed. Reg. 57833, 57833 (Nov, 13, 2001). and that al 
Qaeda terrorists “possess both the capability and the intention to undertake further terrorist 
attacks against the United States that, if not detected and prevented, will cause mass deaths, mass 
injuries, and massive destruction of property, and may place at risk the continuity of the 
operations of the United States Government T and concluding that "an extraordinary emergency 
exists for national defense purposes.” Military Order, § I (c), (g). 66 Fed. Reg, at 57833-34. 
Indeed, shortly alter die attacks, NATO took the unprecedented step of invoking article 5 of the 
North Atlantic Treaty, which provides that an "armed attack against one or more of [the parties] 
shall he considered an attack against them all.” North Atlantic Treaty, Apr. 4, 1949, art, 5, 63 
Star. 224 L 2244, 34 U.N.T.S. 243, 246. 
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developed in recent years into a loosely interconnected system — a network of networks — that is 

ideally suited for the secret communications needs of loosely affiliated terrorist celts. Hundreds 

of Internet service providers, or "ISPs/" and other providers of communications services offer a 

wide variety of global communications options, often free of charge. 
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26. nOMjVmr) Our efforts against al Qaeda and its affiliates therefore present 



critical challenges for the Nation's communications intelligence capabilities. First, in this type 
of conJlict more so than in any other we have ever faced, communications intelligence is 
essential to our ability to identify the enemy and to detect and disrupt its plans for further attacks 
on the United States. Communications intelligence often is the only means we have in learn the 
identities of particular individuals who are involved in terrorist activities and the existence of 
particular terrorist threats. Second, at the same time that communications intelligence is more 
important than ever, the decentralized, non-hierarch ical nature of the enemy and their 
sophistication in exploiting the agility of modem telecommunications make successful 
communications intelligence more difficult than ever. !t is against this backdrop that the risks 
presented by this litigation should be assessed, in particular the risks of disclosing NS A sources 
and methods implicated by the claims being raised, 

C. <Tfl//T3P//9l//QC 1 /MIQ Presidenriallv-Authorized NSA Activities After 9/1 1 
27, (TS//TB P//ELVQC/M f ) As indicated above, in December 2005 then -President 

Bush acknowledged the existence of a prcsidentially-authorized NSA activity called the 
"Terrorist Surveillance Program" under which NSA was authorized to intercept the content of 
specific international communications involving persons reasonably believed to be associated 
with al Qaeda and affiliated terrorist organizations. As also noted, other intelligence activities 
were authorized by the President after the 9/1 1 attacks in a single authorization and were 
subsequently authorized under orders issued by the Foreign Intelligence Surveillance Court 
(■'FISC"). As described below, disclosure of the intelligence sources and methods involved in 
the TSP and other classified activities reasonably can be expected to cause exceptionally grave 
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damage to national security. 



28. ^¥S#¥S P//!j I //() Ci f N F) In the extraordinary circumstances after the 9/1 I attacks 
—when the Intelligence Community believed further catastrophic attacks may be imminent™ 
the President directed the NSA to address important gaps in its intelligence collection activities, 
and to undertake further measures to detect and prevent future attacks. Starling in October 2001 
and continuing with modifications, the President authorized NSA to undertake three activities. 13 
While these activities were distinct in nature, they were designed to work in tandem to meet the 
threat of another mass casualty terrorist attack by enabling NSA to not only intercept the content 
of particular terrorist communications, but to identify other phone niunbers and email addresses 
with which a terrorist had been in contact - and thus, potentially, to identify other individuals 
who may be involved in plotting terrorist attacks, 13 

L I '> Basket 1 - Telephony and Email Content Collection 

29. (T&onrS O C/N F) First, the NSA was authorized by the President to 
intercept the content 14 of certain telephone and Internet communications for which there were 
reasonable grounds to believe that such communications originated or terminated outside the 

United 



In other lawsuits in In re NSA Telecommunications Records 
Litigation, some plaintiffs allege that NSA commenced the particular presidenlially-authorized 
intelligence activities put at issue in the allegations prior to the 9/1 1 attacks. The activities 
described herein were authorized by the President after the 9/1 1 attacks. 

Bach Presidential authorization (with the exception of the first such 
authorization) was supported by a threat assessment memorandum signed by the Director of 
Central Intelligence until 2005 and thereafter by the Director of National Intelligence, which 
documented the current threat to the U.S. homeland and to U.S. interests abroad from a I Qaeda 
and affiliated terrorist organizations. The DNI has separately asserted privilege in order to 
prevent the disclosure of classified a I Qaeda threat information. 

14 (TSWSWOtW) Again, the term "content’' is used herein to refer to the substance, 
meaning, or purport of a communication, as defined in 18 U.S. C. § 2510(8), as distinguished 
from the type of addressing or routing information referred throughout tills declaration as "meta 
data." 
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communications where a communicant was not only reasonably believed to be a member or 
agent of a! Qaeda and affiliated organizations, but of' other international terrorist organizations as 

Starling in March 2004. the presidential authorization for 
content collection was limited ID the collection of international communications where a party to 
such communication was reasonably believed to be a member or agent of al Qaeda or art 
affiliated terrorist organization. The existence of this activity was disclosed by then-president 
Bush in December 2005 and subsequently referred to as the 'Terrorist Surveillance Program" 

0 TSP"). The first presidential authorization of the TSP was on October 4 n 200 1 , and the TSP 
was reauthorized approximately every 30-60 days throughout the existence of the program. 15 




15 



iTGtfTQWmttOUW) The specific wording of the presidential authorizations 
evolved over time and during certain periods authorized other activities (this declaration is not 
intended to and does not (idly describe the authorizations and the differences in those 
authorizations over time). For example, as already noted, the documents authorh 
also contained the authorizations for the meta data activities described hereinl 
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3 1 . (TfiflTfi Authorization ot' die TSP was intended to address an 
important gap in NSA's intelligence collection activities— -namely, that significant changes in 
communications technology since the enactment of the Foreign Intelligence Surveillance Act in 
1978 meant that NSA faced great difficulties in identifying foreign terrorist operatives who were 
communicating with individuals within the United States. FISA established the framework for 
court approval of the U.S. Government "s efforts to conduct foreign intelligence surveillance of 
individuals in the United States, When FISA was enacted in 1978, most international 
communications to or from the United States were transmitted via satellite or radio technology. 
Congress intentionally excluded the vast majority of satellite or radio communications from the 
definition of "electronic surveillance"' in the FISA* See 50 U.S.C. §1 801(f)- The interception of 
domestic communications within the United States, which were carried nearly exclusively on a 
wire, for foreign intelligence purposes, generally required a court order. Asa resuluB 

■ the FtSA did limit NSA' 3 ability io collect '"one-end" telephone or internet 
international communications /o or from the United States on a wire inside the United States. 
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32. *#£#44^ Since the lime FISA was enacted, sweeping advances in 

modem telecommunications technology upset the balance struck by Congress in 1978. By 2001 . 
most international communications to or from the United Stales were on a wire and many 
domestic communications had increasingly become wireless. As a result of this change in 
communications technology, the NSA's collection from inside the United States of internal tonal 
communications (previously carried primarily via radio transmission) had shrunk considerably 
and the Government was forced to prepare FISA applications if it wished to collect (he 
communications of non-U. S. persons located overseas. These circumstances presented a 
significant concern in the exceptional circumstances after 9/11. The NS A confronted (he urgent 
need to identify further plots to attack U.S. interests both domestically and abroad. To do so. it 
needed to intercept the communications of terrorist operatives who. as described aboveM 




the United States was faced with the prospect of 



losing vital intelligence— and failing to detect another feared imminent attack — while the 
Government prepared individual applications for FISA Court authorization on a 
large number of rapidly changing selectors. 17 

33. Accordingly, after the 9/1 1 attacks, the President directed 

the NSA immediately to correct the gap in collecting the content of international 
communications from known or suspected foreign terrorists to or from (he United States. As 
described below, Congress subsequently agreed to certain amendments to the FISA to address 
this collection gap and grant NSA flexibility to collect quickly on overseas, non-U. S. person 






1 

3 

5 

6 

7 

t 

8 

9 

10 

II 

12 

13 

14 

15 

16 

17 

18 

19 

20 

21 

22 

23 

24 

25 

26 

27 

2K 



targets without individual I ISC’ orders. Thus, sources and methods by which the NS A 
intercepted the coniem of information under ihe TSP are still utilized toda\ under similar FISA 
authority and remain highly sensitive and classified information concerning the means by which 
the NSA may obtain significant foreign intelligence information, including, but not limited, to 
terrorist threats. 

2. (Tfi/ZT 9 P/VS IjVO C iWT ) Basket 2 - Bulk Telephony Meta Data Collection 

34. The second discrete NSA activity authorized 

by the President, again pursuant to the same presidential authorization, was the bulk collection of 
meta data related to telephony communications. As noted, telephony meia data is information 
derived from call detail records that relied lion-content information such as. but not limited to. 
the date. time, and duration of telephone calls, as well as the phone numbers used to place and 
receive the cal Is. 18 The purpose of collecting telephony meta data in bulk is to query this 
information with particular "selectors'* (i.e. phone numbers) reasonably believed to be associated 
with a member or agent of al Qaeda or affiliated terrorist organization in order to ascertain other 
contacts and panems of communications for that .selector. Thus, while the amount of telephony 
meta data obtained through the bulk collection under presidential authorization was significant. 
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only a tiny fraction of telephony meta data records collected by the NSA has actually been 



presented to a trained professional for analysis. 19 However, the collection of meta data in bulk is 
necessary to utilize sophisticated and vital analytical tools for tracking the contact 

of al Qaeda and its affiliates. Again, the particular sources and methods 
by which the NSA collects and analyzes telephony meta data remain in use today pursuant to 
authority of the FISA and Executive Order 12333, and constitute highly significant tools for 
detecting and preventing terrorist attacks and thus for protecting national security, 

3. n , 3/j r T3P//31//OClT<P 1 J Basket 3 - Bulk Internet Meta Data Collection 

35. ( TM/jT!j F) The third discrete NSA activity authorized 

by the President, again pursuant to the same presidential authorization, was (he NSA collected 
bulk meta data related to Internet communications— header/ router addressing information, such 
as the "to" "from,” rt cc,” and “bcc" lines, as opposed to the content or subject lines, of a 
standard email, 20 f.n addition to collecting the content of particular communications 




As with telephony meta 



v) ( T0//T0 PjVSIjV O Cj/N F) NSA estimates that by the end of 2006, onlyj^^^of the 
telephony meta data collected had actually been retrieved for analysis. 
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data. NS A would then query the bulk Internet meta data with particular “selectors (t\g. email 
address) reasonably believed to be associated with a member or agent of al Qaeda or affiliated 
terrorist organization in order to ascertain other comacts^^^^^^^of Internet communications 
for that selector (and thus, again, only a tiny fraction oflnternel rneta data collected was viewed 

by an analyst), I 
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D, n^Slj/OC'/HFj Current NSA Activities Transitioned from Presidential 
Authority 

37. (T0//T0 1 WO I #0 Cffi F ) The three sources and methods of intelligence collection 
initially authorized by the President immediately following 9/ 1 1 have evolved over the last 
eleven years and continue to be utilized today. Thus, disclosure of the particular sources and 
methods described herein as they were utilized under presidential authorization would 
compromise the use of those sources and methods under other authority and thereby risk 
exceptionally grave damage to national security. 

L Collection of Communication Content 

38. First, in January of 2007, the content interception 
activities that had been occurring under the TSP were transitioned to authority' of the FISA. 2 " 
Specifically, on January 10, 2007, the FISC issued orders authorizing the Government to conduct 
certain electronic surveillance that had been occurring under the TSP. Those orders included: 




■the ""Foreign Telephone and 
imail Order/' which authorized electronic surveillance of telephone and lntemei 
.ommunications^^^^^^^Hwhere the Government determined that there 
vas probable cause to believe that (i) one of the communicants is a member or agent of I 



This declaration generally describes the transition of all three 
Vesidemialty-authorized activities to FISA authority, but does not describe in detail the FiSC 
Orders themselves, the details of their periodic renewal, specific legal issues that arose, the 
process involved in obtaining FISC approval, continual briefings to the various congressional 
>vcrsight committees, or any subsequent compliance issues and corrective action taken as a 
esult of those incidents. The FLSC undertakes close oversight of NSA activities that are subject 
o the FISA, and NSA has worked extensively to ensure compliance with FISC orders, including 
hose described herein. 
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; and (ii) the communicahon is to or from a foreign country 



(/.£., a one-end foreign communication to or from the United Slates). Thereafter, any electronic 
surveillance, as that term is defined in the FfSA (see 50 U.S.C. § 1801(f)), that was occurring as 
part of the TSP became subject to the approval of the FISA Court and the TSP was not 
reauthorized, 23 

59. (TCj¥CIjdOCjnt i r) B 




(U) On January' 17. 2007, the Attorney General made public the general facts that new 
orders of the Foreign Intelligence Surveillance Court had been issued that authorized the 
Jovemment to target for collection international communications into or out of the United States 
vhere there is probable cause to believe that one of the communicants is a member or agent of al 
)aeda or an associated terrorist organization; that, as a result of these orders, any electronic 
surveillance that had been occurring as part of the TSP was then being conducted subject to the 
approval of (he FSSA Court; and that, under these circumstances, the TSP was not reauthorized. 



the 

7 ISC Foreign Tele phone and EmajJ Order authorized NSA to intercept the conten t of 
:omm unicat ions of I 
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40. (TO//flVJOC/N* r ) The process of seeking renewal of the January 2007 FISC 

Foreign Telephone and Email Order after its original 90 day authorization ultimately led the 
Executive Branch to press for and Congress to enact amendments to the FISA that granted NS A 
greater flexibility to collect the content of international communications without the need for 
individual FISC orders for each selector targeted. 
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seek additional statutory authority under the FISA to intercept the content of international 
communication 

4 ) , (T 6 //T 6 P 1 VS I//QC/N Ffr (n August 2007 ? Congress enacted the Protect America 

Act ("PAA"), which granted NS A additional flexibility under the FISA to target international 
communications without an individual court order for each selector. Under the PA A, the FISA's 
definition of "electronic surveillance" was clarified to exclude “surveillance directed at a person 
reasonably believed to be located outside the United States" 50 U.S,C. § I805A. This change in 
the definition of electronic surveillance under the FISA permitted the NSA to intercept 
communications off of a wire inside the United States without an individual court order so long 
as the target was located outside the United States. This restored some of the operational 
flexibility needed to swiftly target rapidly changing selectors on multiple terrorist targets that 
existed under the TSP. The PAA eliminated the need for the Foreign Telephone and Email 
Order, and that Order expired after the PAA was enacted. 

42. (T3//B1//OC/NF ) The PAA authorized (he DNI and the Attorney General to 

jointly "authorize the acquisition of foreign intelligence information concerning persons 
reasonably believed to be outside the United Stales" for up to one year. id. § 18056(a), and to 
issue directives to communications service providers requiring them to "immediately provide the 



inside the United Stales. 
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Government with all information, Facilities, and assistance necessary lo accomplish the 

acquisition" of necessary intelligence information, id. § 180513(e)* Such directives were issued 

to a number of telecommunication and internet service provider s*( 

and the NS A conducted content surveillance of overseas targets under the PA A with the 

assistance of those telecommunication carriers. More specifically, in August 2007, the Attorney 

General and DN1 issued the requisite certifications* and, among other things, content collection 

under the PA A continued as Co persons reasonably believed to be outside the United States 

involving ^ muiupicutuui:- o! t » 



Under the PA A* approx ini ate foreign 

selectors that had been authorized under the Foreign Telephone and Email Order were 
transitioned to collection by NSA under authority of the PAA. 

43. (TtJWiWO CYN F) The PAA was enacted as a temporary me isure set to expire in 
ISO days, and it ultimately did expire on February 16. 2008 (although directives issued under the 
PAA continued in effect until their stated expiration dates). On July 1 1 . 2008, the Foreign 
Intelligence Surveillance Act Amendments Act of 2008 (FA A) was signed into law. Section 702 
of the FAA created new statutory authority and procedures that permitted the targeting of non- 
LJnited States persons reasonably believe to be outside of the United States without individual 
FISC orders but subject to directives issued to telecommunications earners by the Director of 
National Intelligence and the Attorney General under Section 702(h) of the FISA for the 
continuation of overseas surveillance under this new authority. See 50 U.S.C* § 1 SS)a(h) (as 
added by the FISA Act of 2008, P*L. II 0-26) ). Directives that had been issued under the PAA 
for content surveillance of overseas targets (including surveillance of speci targets 

overseas) were thus replaced by new directives for such surveillance issued pursuant lo the FAA. 
While the existence of prior PAA authority and current FAA authority are set forth in public 
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statutory provisions, the operational details of the sources and methods used by NSA to carry out 

that authority remain highly classified. 

44. If) As with the TSP. the purpose of the new authority in 
Section 702 of the FAA was io account for changes in communications technology since 1 978 
whereby international communications were increasingly transmitted to the United Slates via 
fiber optic cable and. consequently, increasingly subject to FISA’s definition of electronic 
surveillance and requirements. B> granting NSA the authoritv to conduct acquisitions inside the 
United States by targeting non-United States persons located outside die United States in order to 
acquire foreign intelligence information without the need for individualized FISC orders 
approving surveillance for each individual target, Section 702 permitted the NSA to continue to 
undertake content surveillance for overseas targets in a manner similar to that permitted under 
the TSP. As of August 2012, NSA presently has a total of approximately UH individual 
foreign selectors under coverage pursuant to Section 702 of the FAA. Section 702 has proven to 
be a critical tool in the Government’s efforts to acquire significant foreign intelligence neccssars 
to protect the Nation’s security and has quickly become one of the most important legal 
authorities available to the Intelligence Community. 

45. (TS//TSPjVti l ^OOWF ) In sum, the post 9/1 I content surveillance activities 
undertaken by the NSA evolved from the presidential!}* authorized TSP to the FISC Foreign 
Telephone and Email Order, to the directives issued under the PA A and. ultimately, to the 
directives that are now being issued puisuuiii to the FISA Amendments Act of 2008. Each 
authorization sought to enable the NSA to undertake content surveillance on numerous multiple 
targets overseas without the need to obtain advance court approval for each target. But, as 
explained further below, none of' these content surveillance activities has entailed the kind of 
indiscriminate "dragnet" content surv eillance of domestic or international telephony or Internet 
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eommunicariois that the plaintiffs allege* Rather* from the outset, content collection by the NSA 

has focused on international communications reasonably believed to involve terrorist 

organizations 

2, Collection of Bulk Telephony Mela data (Business Records ) 

46. As set forth above, the second activity 
authorized by then -President Bush after the 9/1 I attacks was the bulk collection of meta data 
related 10 telephony communications — again, information derived from call detail records that 
reflect non-content information such as, but not limited to, the date, lime and duration of 
telephone calls, as well as the phone numbers used to piece and received the calls. That activity, 
which began pursuant to Presidential authorization in October 2001 . continues today under the 
authority of the FISA. 

47. Beginning in May 2006. the bulk collection of non- 
content telephony meta data, previously subject to Presidential authorization, was authorized by 
the FISC pursuant to what is known as the Telephone Business Records Order. The FISC found 
that, in order to protect against international terrorism, reasonable grounds existed to order 
certain telecommunication carriers to produce to the NSA in bulk "call detail records" or 
''telephony meta data," pursuant to 50 U,S,C, jj 1 861 (c) (authorizing the production of business 
records for, inter alia, an investigation to protect against international terrorism). While this bulk 
collection is again very broad in scope, the NSA has been authorized by the FISC to query the 
archived telephony data solely with identified telephone numbers for which there are facts giving 
rise to a reasonable, articulable suspicion that that the number is associated with (among other 
foreign targets (referred to a "RAS" 

determ i nation). Bulk telephony meta data collection* as continued to be authorized under FISA 
authority, remains a vital source and method needed to utilize sophisticated anaKlical tools for 
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3. fflV/OltfOa.W) Collection of Bulk Internet M eta data 

48. (TC//T0 PflO I //0 CVN r) As also described above, the third activity authorized by 

then-President Bush after the 9/1 1 attacks was the bulk collection of meta data related to Internet 
communications, NSA carried out this bulk collection activity under presidential authorization 



top occRi: i /;i f i i vdi i 

contacts o 







I During period from 2 f .u 

application was prepared and submitted to the FISC to continue the bulk collection of Internet 
meta data, fn July 2004, the FISC authorized the bulk collection of Internet meta data through 
the use of a pen register and trap and trace device ("FISC Pen Register Order ' or "PRTT 
Order"). See 50 U.S.C. § 1 84 1 , e/ seq. (defining "pen register" and "trap and trace device"). 

49. XTO/fOVtOCmr) Initially, under the PRTT Order, NSA was authorized to 
collect, in bulk, meta data associated with electronic communication^ 

in a manner similar to that which NSA had utilized under presidential 



authorization. Specifically, the collection of Internet meta data 

.uufiu! i/cd because m 



had been 



In addition, while NSA was authorized to collect 
it was permitted to query the archived meta data 
only using Internet selectors for which there were facts giving rise to a reasonable, articulable 
suspicion that the email address was associated with J 

As with bulk collection of telephony meta data 
collection, the bulk collection of Internet meta data allowed the NSA to use critical and unique 
analytical capabilities to track the contacts (even retrospect! velv 




Internet meta data in bulk 1 
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known terrorists. 

50. The FtSC Pen Register Order was reauthorized approximately 

every 90 days from July 2004 until December 201 1 21 In December 201 1 , NS A did not seek 
reauthorization of the PRTT Order after concluding that this activity was loo limited in scope to 
■ ; . : . v • ■ , • • • 



I 1 fill s . rh c d I sc ! < > s I : re o I ’ l h i s so u re e a j i cl i i i e ( h t ' d \ on! c ! 

compromise NSA's current collection activities and analytical capabilities and cause 



27 



with FISC oversight of NS A activities subject to the 



FISA, stalling ini 



authorization for the PRTT Order was discontinued while 
NS A reso lved certain compliance issues with the FISC. The PRTT Order was reauthorized in 
until its last authorization expired in December 2011. 
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exceptionally grave damage to the national security of the United States, 

5 1 . P//3L//OCVN I' 1 ) The Jewel and Slntbert plaintiffs allege that, in March 

2004, the Acting Attorney General of the Department of Justice refused to reauthorize certain 
aspects of the activities authorized by the President after the 9/1 1 attacks. See Jewel Comp], 
45-49; Shubert SAC 97-99, [ was not the Executive Director of NS A in March 2004, nor was 1 
personally involved in the matter at issue, and this declaration does not describe the full details 
oi \h\< dispute I 
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V* (U) Information Subject to DNI and NSA Privilege Assertions 



52* ( TfWTO P//0 1 Q C/N F ) As the foregoing discussion indicates, a wide range of 

intelligence sources and methods, used over the past decade and still in use today, are at risk of 
disclosure in this lawsuit. While the plaintiffs' allegations are focused on the period immediately 
following 9/1 h and seek to challenge alleged activities undertaken pursuant to presidential 
authorization, the sources and methods used by NSA at that time continue to be used under 
subsequent authorizations. To expose a source and method, based on its use during one period o i 
time, under one authority, would compromise, if not destroy, NSA 's ability to use that method 
today. All of the presidentially authorized activities being challenged in this lawsuit (starting in 
July 2004) were placed under other FISA authority and have been subject to Congressional 
oversight. The need to protect these sources and methods continues to exist notwithstanding 
plaintiffs' challenge to the lawfulness of their use under presidential authorization. 

53. (Tfl/JTGP//OI/j f OC/Nr) Accordingly, the NSA seeks to protect from disclosure in 
this case the sources and methods its has utilized to undertake (i) content surveillance under the 
TSP, including information needed to demonstrate that the TSP was not the content ‘'dragnet" 
plaintiffs allege; (ii) bulk collection of telephony rneta data; (iii) bulk collection of Internet meta 
data, including the analytical tools for querying such data to detect terrorist contacts; (iv) facts 
concerning whether any NSA surveillance activities have been directed at or collected any 
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54. (U) In genera! and unclassified terms, the following categories of information arc 

subject to the DNI's assertion of the state secrets privilege and statutory privilege under the 
National Security Act. as well as my assertion of'the NSA statutory privilege; 



A. (U) Information that may tend to confirm or deny whether 
the plaintiffs have been subject to any alleged NSA 
intelligence activity that may be at issue in this matter; and 

B. (U) Any information concerning NSA intelligence 
activities, sources, or methods that may relate to or be 
necessary to adjudicate plaintiffs’ allegations, including 
allegations that the NSA. with the assistance of 
telecommunications carriers such as AT&T and Verizon, 
indiscriminately intercepts the content of communications 
and also collects the communication records of millions of 
Americans as part of an alleged "Program" authorized by 
the President after 9/1 1 . See. e g. , Jewel Comp, 11 2-13; 
39-97: Shuberf SAC 11 1 -9: 57-58; 62-9 1 . 

The scope of this assertion includes but is not limited to; 

(i) (U) Information concerning the scope and 
Operation of the now inoperative "Terrorist Surveillance 
Program" ("TSP”) regarding the interception of the content 
of certain one-end international communications 
reasonably believed to involve a member or agent of al- 
Qaeda or an affiliated terrorist organization, and any other 
information related to demonstrating that the NSA does not 
otherwise engage in the content surveillance "dragnet" that 
the plaintiffs allege; and 

(ii) (U) Information concerning whether or not the 
NSA obtained from telecommunications companies such as 
AT&T and Verizon communication transactional records as 
alleged in the Complaint; see. e g.. Jewel Complaint H 10; 
82-97; Shubert SAC 1 102: and 



(iii) (U) Information that may tend to confirm or 
deny whether AT&T. Verizon (and to the extent relevant or 
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necessary, any oilier tel ecomm unicat ions carrier). have 
provided assistance to the NS A in connection with any 
alleged activity; see. eg.. Jewel tom plain! HI 2. 7-8. 10; 13 
50-97; Shitberi SAC 6. 1 0- 1 3; 66-68, 

VI. fU) Harm of Disclosure of Priv ileged Information 

A. (U) Information Concerning Whether the Plaintiffs Have 
Been Subject to the Alleged NSA Activities 

55. (U) The first major category of information as to which I am supporting the DNI's 

assertion of privilege, and asserting the NSA’s own statutory privilege, concerns information as 
to whether particular individuals, including the named plaintiffs in this lawsuit, have been 
subject to alleged NSA intelligence activities. As set forth below, disclosure of such information 
would cause exceptionally grave damage to the national security. 



1. (Tfj//O I //*r 



56. (T f i t ' /TO P//fj I // f K 3/ ? V r ) ' Th e named plaintiffs in the Jewel ‘ 1 and Shuherr' cases 

allege that content of their own telephone and Internet communications have been and continue 
:o be subject to unlawful search and seizure by the NSA. along with the content of 
communications of millions of ordinary Americans.' 1 ' 1 As set forth herein, the NSA does not 




‘ 4I (U) According to the Complaint, named plaintiffs in the Jewel case are Tash Hepting, 
Gregory Hicks. Carolyn Jewel, Erik Knulzen. and Joice Walton. 

' 2 (U) According to the Second Amended Complaint, the named plaintiffs in the Shubert 
se are Virginia Shubert. Noha Arafa. Sarah Dranolf. and Hilary Botein. 



11 (U) Specifically, the Jewel Plaintiffs allege that pursuant to a presidential!)' authorized 
program after the 9/1 I attacks, the N’SA. with the assistance of AT&T, acquired and continues to 
acquire the content of phone calls, emails, instant messages, text messages, web and other 
rommunications. both international and domestic, of millions of ordinary Americans 
—"practical l\ every American who uses the phone system or the Internet" — including the 
iMaintilTs. See Jewel Complaint rr 7. 9. 10; my also id. at “ 39-97. The Shubert Plaintiffs 
allege that the contents of “v irtually every telephone. Internet and email communication sent 
Tom or received within the Cnited States since shortly after September 1 I, 2001." including 
Plaintiffs' communications, are being "searched, seized, intercepted, and subject to surveillance 
xithout a v\ arrant, court order or any oilier lawful authorization in violation of the Foreign 
ntelligencc Surveillance Act of 1978. 50 U.S.C. Jj 1810." See Shitberi SAC r I: see also id. 5. 
J. 
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51. (T0//TS PM f i I HO CfH f) Further, the named plaintiff's in Jewel and Shu her I allege 

that the NS A has been and is continuing to collect the private telephone and Internet transaction 



records of millions of Americans, with the assistance of telecommunication earners, again 



including information concerning the plaintiffs' telephone and Internet communications. 
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(U) Specifically, the Jewel plaintiffs allege that NSA has "unlawfully solicited and 
)btained from telecommunications companies the complete and ongoing disclosure of the private 
elephone and interne! transactional records^ of millions of ordinary Americans, including 
>lainci ITs. See Jewel Complaint ^fl| 7, 10, 11, 13,82-97. The Shuheri plaintiffs allege that "NSA 
low monitors huge volumes of records of domestic emails and Internet searches. . . [and] 
eceives this so-called Transactional' data from . , , private companies . . /’ See Shuheri SAC 
j 102, 




^ ( T S//TS PM) I //(M VN F) During the time period covered by the Presidential 
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3. (V) Harm of Disclosing Whether Plaintiffs were Subject to NSA Activities. 

58. (T0/) r rfciVei/ i fQCTIF) B 



59. (U) As a matter of' course, the NSA cannot publicly confirm or deny whether any 

individual is subject to surveillance activities because to do so would tend to reveal actual 
targets. For example, if the NSA were to confirm in these two cases and others that specific 
individuals are not targets of surveillance, but later refuse to comment (as it would have to) in a 
case involving an actual target, an actual or potential adversary of the United Stales could easily 
deduce by comparing such responses that the person in the latter case is a target , The harm of 
revealing targets of foreign intelligence surveillance should be obvious. If an individual knows 
ar suspects he is a target of U.S. intelligence activities, he would naturally tend to alter his 
behavior to take new precautions against surveillance. In addition, revealing who is not a target 
would indicate who has avoided surveillance and what may be a secure channel for 
:ommunication. Such information could lead an actual or potential adversary, secure in the 




| At the time 

he bulk collection of Internet meta data pursuant to orders of the FISC (the PRTT Order) 
expired in December 201 K NSA estimates thanhepercentage of Internet meta data that it 
collected had been reduced to approx i mate l With respect to telephony meta 
iala, NSA has previously estimated that, prior to the 2006 FISC Order, about| 
elephonv meta data records was presented to an analyst for review. 
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knowledge that he is not under surveillance. kHTeffMnxistile foreign adversary convey 
information; alternatively, such a person may be unwittingly utilized or even forced to convey 
information through a secure channel to a hostile foreign adversary. Revealing which channels 
arc free from surveillance and which are not would also reveal sensitive intelligence methods and 
(hereby could help any adversary evade detection and capitalize on limitations in NSA’s 
capabilities . 40 
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B. (11) Information Related to NSA Activities, Sources, or Methods 

Implicated bv Plaintiffs* Allegations of a Communications “Dragnet** 

61 . (LJ) ! am also supporting l he DNI's assertion of privilege and asserting the NSA's 

statutory privilege over any other facts concerning NSA intelligence activities, sources, or 
methods that may relate to or be necessary to litigate the plaintiffs' claims and allegations, 
including that: (1 ) the NSA is indiscriminately intercepting the content of communications of 
millions of ordinary Americans, see e.g .< Jewel Complaint 1, 9, 10; Shuberi SAC ^ L 5. 7; 
and (2) that the NSA is collecting the private telephone and Internet transactional records of 
Americans with the assistance of telecommunications carriers, again including information 
concerning the plaintiffs* telephone and Internet communications. See Jewel Complaint 7 „ 10, 

11.1 3. 82-97; see Shuberi SAC U 102. As described above, the scope of the government's 
privilege assertion includes but is not limited to: ( 1 ) information concerning the now inoperative 
Terrorist Surveillance Program” and any other NSA activities that would be at risk of disclosure 
3r required in demonstrating that the NSA has not engaged in content "dragnet" surveillance 
activities that the plaintiffs allege; and (2) information concerning whether or not the NSA 
obtains transactional communications records from telecommunications companies. As set forth 
3 elow\ the disclosure of such information would cause exceptionally grave damage to national 
security. 

1, (U) Information Concerning Plaintiffs * Content Surveillance Allegations 

62. ( LI) After the existence of the TSP was officially acknowledged in December 
J005, the Government stated that this activity was limited to the interception of the content of 
:ertain communications for which there were reasonable grounds to believe that: ( l ) such 
:ommunicauon originated or terminated outside the United States; and (2} a party to such 
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communication is a member or agent of al Qaeda or an affiliated tcrrorisl organization. 
Nonetheless. plaintiffs* allege that the \SA indiscriminately intercepts the content of 
communications of millions of ordinary Americans. See e Jewel Complaint 44 7. 9. ) 0: see 
Shuberi SAC 4 4 1 , 5. 7. As the Government has also previously stated. 51 plaintiffs’ allegation 
that the NSA has undertaken indiscriminate surveillance of the content 4 " of millions of 
communications sent or received by people inside the United States after 9/1 1 under the TSP is 
false. But to the extent the NSA must demonstrate that content surveillance under the TSP was 
so limited, and was not plaintiffs" alleged content **dragnct.” or demonstrate that the NSA lias not 
otherwise engaged in the alleged content “dragnet.** highly classified NSA intelligence sources 
and methods about the operation of the TSP and current NSA intelligence activities would be 
subject to disclosure or the risk of disclosure. The disclosure of whether and to what extent the 
NSA utilizes certain intelligence sources and methods would reveal to foreign adversaries the 



NSA*s capabilities, or lack thereof, enabling them to either evade particular channels of 
communications that are being monitored, or exploit channels of communications that are not 
subject to NSA activities - in cither case risking exceptionally grave damage to national security. 



(U) See Public Declaration of Dennis Blair. Director of National Intelligence. 

4 15 (April 3. 2009) (Dkt. 18-3 in. Jewel action (08-cv-4373): Public Declaration ofDeborah A. 
Bonanni. National Security Agency 14 (Dkt. 18-4 in Jewel action (08-cv-4373): Public 
Declaration ol Dennis Blair. Director of National Intelligence, 15 (October 30. 2009) (Dkt. 
680-1 in Shuberi action (MDL 06-cv- 1 791 ): Public Declaration of Lt. Gen. Keith B. Alexander. 
National Security Agencv r 19 (Dkt. 680-1 in Shuberi action (MDL 06-cv- 179 1 ). 

42 (U) The term “content” is used herein to refer to the substance, meaning, or purport of 
a communication as defined in 18 U.S.C. $ 2510(8). 
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(a) (U) Information Related to the Terrorist Surveillance Program 

63* (XJ) First, a range of operational details concerning the Terrorist Surveillance 
Program remains properly classified and privileged from disclosure, and could not be disclosed 
to address plaintiffs' content "dragnet" allegations including the following TSP-relatcd 

information. 



64. WOCffi F ) First, interception of the content of communications 

under the TSP was triggered by a range of information, including sensitive foreign intelligence, 
obtained or derived from various sources, indicating that a particular phone number or email 
address was reasonably believed by the U.S, Intelligence Community to be associated with a 
member or agent of al Qaeda or an affiliated terrorist organization. Professional intelligence 
officers at the NSA undertook a careful but expeditious analysis of that information, and 
considered a number of possible factors, in determining whether it would be appropriate to target 
a telephone number or Internet selectors under the TSP. Those factors included whether the 
target phone number or email address was: { 1 ) reasonably believed by the ITS. Intelligence 
Community, based on other authorized collection activities or other law enforcement or 
intelligence sources* to be used by a member or agent of al Qaeda or an affiliated terrorist 
organization;* 
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65. (TfljVTfi fV/H)y/0 C/N I ) Once the NSA determined that there were reasonable 

grounds to believe that the target was a member or agent of al Qaeda or an affiliated terrorist 
organization, the NSA took steps to focus the interception on the specific al Qaeda-related target 
and on communications of that target that were to or from a foreign country. In this respect, the 
NSA's the NSA had 

reasonable grounds to believe carry the ''one-end foreign" communications of members or agents 
ofal Qaeda or affiliated terrorist organizations. 
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68. (TO//TSP//S1>/OC/N F) The NSA took specific steps in the actual TSP 
interception process to minimize the risk that the communications of non-targets were 
intercepted. With respect to telephone communications, spec! tic telephone numbers identified 
through the analysis outlined above werej 

\%o that the only communications 
intercepted were those to or from the targeted number of an individual who was reasonably 
believed to be a member or agent of al Qaeda or an affiliated terrorist organization. 
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69. ^¥8pWS 1W0 JM) O/Pi f) For l he interception of’ihe content of Internet 
communications under the TSP, the NS A used identifying information obtained through its 
analysis of the target, such as email addresses^^^^^^^^^fto target for collection the 
communications of individuals reasonably believed to be members or agents of al Qaeda or an 
affiliated terrorist organization, | 

The NS A did not search the content of the 
comm uni cat with "key words” (such as “wedding" or '‘jihad") other 

than the targeted selectors themselves. See Jewel Complaint ^1 1 ; Shithert SAC 70 ? 72 
(alleging key word searches on communications content). Rather, the NS A targeted for 
collection only Internet associated with suspected 

members or agents of al Qaeda or afll Mated terrorist organizations, or communications in which 
such were mentioned. In addition, due to technical limitations of the 

hardware and software, incidental collection of non-targel communications occurred, and in such 
circumstances the NSA applied its minimization procedures to ensure that communications of 
non-targets were not disseminated. To the extent such facts would be necessary to dispel 
plaintiffs' erroneous content "dragnet” allegations, they could not be disclosed without revealing 
highly sensitive intelligence methods. h 

70. j ^¥9jW9P/j , Q IjVOC/M T) In addition to procedures designed to ensure that the TSP 
was limited to the international communications of al Qaeda members and affiliates, the NSA 
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(TS/ i Hr WiWSt WGW) In addition, in implementing the TSP, the NSA was directed 
by the President to minimize (he information collected concerning American citizens, to the 
extent consistent with the effective accomplishment of the mission of detection and prevention of 
acts of terrorism within the United States, The President further directed that any failure to 
adhere to the provisions of the authorizations should be reported to the President, Accordingly, 
NSA applied its existing Legal Compliance and Minimization Procedures applicable to U.S. 
persons to the extent not inconsistent with the presidential authorization. See United States 
Signals Intelligence Directive (USSID) 18. These procedures require that the NSA refrain from 
intentionally acquiring the communications of U.S. persons who are not the targets of its 
surveillance activities, that it destroy upon recognition any communications solely between or 
among persons in the U.S. that it inadvertently acquires, and that it minimize all U.S. person 
identities in intelligence reporting unless a senior NSA official determines upon individual 
request that die recipient of the report requires such information in order to perform a law ful 
function assigned to it and the identity of the U.S. person is necessary to understand the foreign 
intelligence or to assess its significance. 
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The foregoing information 
about the targeted scope o l content collection under the TSP could not be disclosed, in order to 
address and rebut plaintiffs' allegation that the NSA, with the assistance of AT&T and Verizon, 
engaged in the alleged content “dragnet," without revealing sp ;cific NSA sources and methods 
and thereby causing exceptionally grave damage to the nation. 1 security 

(b) ^PS!¥f#//Q C/M F) Information Related to Content Surveillance 

Under Other Authority 

72. addition to the foregoing facts about the 

TSP, information concerning other NSA intelligence activities, sources, and methods would be 
risk of disclosure or required to address allegations or prove that there has been no "dragnet" 
program authorized by the President after 0/1 I under which the NSA intercepts the content of 
virtually all domestic and international communications as the plaintiffs allege. 



at 
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73. (TWmiftOOKf) In addition, as outlined above, the content surveillance 
activities authorized under the TSP were transitioned in January 2007 io FlSC-auihorized 
electronic surveillance under Title 1 of the FISA and then, subsequently, to the Protect Amjrica 
Act of 2007, and then ultimately under Section 702 of the FISA Amendments Act of 2008 
Again, while the statutory authority is publicly known, the operational details of the survei 
activities remain highly classified. NS A continues to utilize sources and methods for content 
surveillance similar to that utilized under the TSP whereby the content of international telephone 
and Internet communications are captured a 



lance 




Cl'issilieU I ft Cmnism. I.\ Parte Declaration of Frances J. I- lei sell. National Security Agency 
l itroivti Jewel. et at. v. \ at tuna! Set arm tgenev. etaf. ( N o . 68 *cv* 48 7 > ■> J S W ) 

1 1 ii i i' i i r i ii mi i 




I 

2 

3 

4 

5 

6 

7 

K 

9 

to 

I t 

12 

N 

15 

16 

17 

18 

19 

20 

21 

22 

23 

24 

25 

26 

27 

28 




mm 

by targeting 



y^ i icoN/NorofiM 




selectors reasonably 



Disclosure of particular sources and methods utilized under the TSP, in order to litigate 

plaintiffs’ "dragnet' - allegations under presidential authorization, would compromise the use of 
similar sources and methods today. And disclosure of these sources and methods as currently 
utilized, in order to demonstrate there is no ongoing surveillance "dragnet/' as alleged, would 
likewise compromise vital intelligence collection operations under FISA and other authority and, 
again, cause exceptionally grave damage to current efforts to detect and prevent terrorist 



attacks. 



48 



2, (U) Plaintiffs* Allegations Concerning the Collection of Communication 

Records 

74. (LJ) Plaintiffs also allege that the USA is collecting the private telephone and 
Internet transaction records of millions of Americans, again including information concerning 
the plaintiffs' telephone and Internet communications. See, eg., Jewel Complaint 

7, 10, IK 13, 82-97; see Sfmheri SAC 1[ 102. To address these allegations w ; ould risk or 
require disclosure of NSA sources and methods and reasonably could be expected to cause 
exceptionally grave damage to national security. 

75. addition to implicating the NSA's content collection 
activities authorized after the 9/1 i attacks, the plaintiffs' allegations put directly at issue the 



Vyi./'/QC/NF 1 ) To the extent relevant to this case, additional facts about the 
operational details of the TSP ajid subsequent FISA authorized content surveillance activities 
could not be disclosed without causing exceptionally grave damage to national security, 
including for example information that would demonstrate the operational swiftness and 
e ffec t i venes s of utilizing content surveillance in co n junction with the bulk meta da 
activities. 



the 1 SF. in conjunction with meta data collection and analysis described herein, allowed 
the NSA to obtain rapidly not only the content of a particular communication, but connections 
between that target and others who may form a web of a) Qaeda conspirators. 
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NSA*s bulk collection of non-content communication meta data. As explained above, the NSA 
lias not engaged in the alleged "dragnet" of communication carmnf, and to address plaintiffs' 
allegations concerning the bulk collection of non-contenf information would require disclosure 
of NSA sources and methods that would cause exceptionally grave damage to national security. 




76. (TSWUJflOONr) The bulk meta data collection activities that have been 
undertaken by the NSA since 9/1 1 are vital tools for protecting the United States from another 



catastrophic terrorist attack. Disclosure of these meta data activities* sources* or methods \ 
cause exceptionally grave damage to national security. It is not possible to target col lectio 
solely on known terrorist telephone identifiers and effectively discover the existence, local 
and plans of terrorist adversaries. 



Quid 



on. 




Meta data collection and analysis provides a vital and effective 
:apabilily to keep track of such operatives. 
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77. (T£Wfif//OC/NF) In particular, the bulk col lection of Internet and telephony nieta 

data allows the NS A to use critical and unique analytical capabilities to track the coruacts| 

lof members or agents oil 

through i be use of two highly sophisticated tools known as ‘ contact-chaining" andl 

| Contact-chaining aliows the NSA to identify telephone numbers and email addresses 
ihai have been in contact with numbers and addresses; in turn, those 

contacts can be targeted for immediate query and analysis as 

and addresses are iden tilled. When the NSA performs a contact-chaining query on a terrorist- 

:w:snciated telephone idem) Her, I 




78. (TOtfOlflOG/NO | 
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which particular piece of meta data will turn out to identify a terrorist, collecting meta data in 

, NSA analysts know that the 
terrorists' telephone calls are located somewhere in the billions of data bits; what they cannot 
know ahead of lime is exactly where. The ability to accumulate meta data substantially increases 
NSA's ability to detect and identify these targets. One particular advantage of bulk meta data 
collection is that it provides a historical perspective on past contact activity that cannot be 
captured in the present or prospectively. Such historical links may be vital to i dent i lying new 
targets, because the meta data may contain links that are absolutely unique, pointing to potential 
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targets that otherwise would be missed. 





These sources and methods enable the NS A to segregate some of that very 
small amount of otherwise undetectable but highly valuable information from the overwhelming 
amount of other information that has no intelligence value whatsoever— in colloquial terms, to 
find at least some of the needles hidden in the haystack. If employed on a sufficient volume of 

nnuv. ! that were previous!; unkn- r.vn: I 




82. flWfTS P WS l//0C/?< F) As explained above* the bulk mela data collection 

ictivities that began under presidential authorization were transitioned to the authority of the 
r ISA in July 2004 (PRTT Order for Internet meia data collection) and May 2006 {Business 
Records Order for telephony meta data collection). The PRTT Order was in elTect until 
December 201 1 and the Business Records Order remains in effect Thus, long after the 
residential authorization expired, N8A continued bulk meta data collection activities under 
: fSA authority. 




'laviilk’d in Camera. L\ Parte Declaration of Frances.!. Flcisch. National Security Agency 

'aruivn Jwef. at. v. \t»itanaf Securin l%encv. ei al (N o. OS-cv^4S?3-J SW) 58 

IN I l| I I I I l | II I l ul l 






I 

2 

3 

4 

5 

6 

7 

8 

9 

10 

] ! 

12 

13 

14 

I 5 

16 

17 

IS 

19 

20 

21 

22 

23 

24 

23 

26 

27 

28 




83, [T3jV 8I//OC/NF) Accordingly, adjudication of plaintiffs' allegations concerning 
:he collection of non-content meta data and records about communication transactions would risk 
}T require disclosure of critical NS A sources and methods for track con tacts of 

;errorist communications as well as the existence of current NSA activities under FIS i 

Despite media speculation about these activities, official confirmation and disclosure 
3 f the NSA' s bulk collection and targeted analysis of telephony meta data would confirm to all 
our foreign the 

ntelligence capabilities and thereby severely undermine NSA's ability to gather information 
concerning terrorist connections and cause exceptional harm to national security. 
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TTSffStffOC/Hri) Information Concerning Current FISA Authorized 



Activities and Specific FISC Orders 

84. I am also supporting the DNI's state secrets privilege 

assertion, and asserting MSA's statutory privilege, over information concerning the various 
orders of the Foreign Intelligence Surveillance Court mentioned throughout this declaration that 
authorize NS A intelligence collection activities, as well as NSA surveillance activities conducted 
pursuant to the now lapsed Protect America Act (“PAA") and current activities authorized by the 
FISA Amendments Act of 2008. As explained herein, the three NSA intelligence activities 
initiated after the September 1 l attacks to detect and prevent a further at Qaeda attack — (i) 
content collection of targeted al Qaeda and associated terrorist- related communications under 
what later was called the TSP; (ii) internet meta data bulk collection; and (iii) telephony meta 
data bulk collection — have, beginning in January 2007, July 2004, and May 2006 respectively, 
been conducted pursuant to FISA and are no longer being conducted under presidential 
authorization. FISC Orders authorizing the bulk collection of non-content transactional data for 
internet communications commenced in the July 2004 FISC Pen Register Order and expired in 
December 20 1 1, and FISC Orders authorizing the bulk collection of non-content telephony meta 
data commenced in May 2006 and remain ongoing. The existence and operational details of 
hese orders remain highly classified, and disclosure of information concerning the orders would 
;ause exceptional harm to national security by revealing the existence and nature of still sensitive 
ntelligence sources and methods. 49 In addition, while the Government has acknowledged the 



ll STrj//GI//OC/Nr) For this reason, the FISC Telephone Business Records Order 
prohibits any person from disclosing to any other person that the NSA has sought or obtained the 
elephony meta data, other than to (a) those persons to whom disclosure is necessary to comply 
Mth the Order; (b) an attorney to obtain legal advice or assistance with respect to the production 
if meta data in response to the Order; or (c) oilier persons as permitted by the Director of the FBI 
)r the Director's designee. They further provide that any person to whom disclosure is made 
pursuant to (a), (b), or (c) shall be subject to the nondisclosure requirements applicable to a 
>cr$on to whom the Order is directed in (he same manner as such person. The bulk Pen Register 
orders say that the telecommunications companies who are served with them shall not "disclose 
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general existence of the January 10, 2007 FISC Orders authorizing electronic surveillance 

similar to that undertaken in the TSP, the content of those orders^ and facts concerning the NS A 
sources and methods they authorize, cannot he disclosed without likewise causing exceptional 
harm to national security. Likewise, the particular content surveillance sources and methods 
utilized by the NS A pursuant to the PA A and, currently., under the FISA Amendments Act of 
2008, likewise cannot be disclosed. For these reasons, the privilege assertion by the DNI, and 
my assertion of NS A 's statutory privilege, encompass the FISC Orders and the sources and 
methods they concern. 

4* (U) Information Concerning Plaintiffs 1 Allegations that Telecommunications 

Carriers Provided Assistance to the NSA 

85. (U) The final major category of NSA intelligence sources and methods as to 

which I am supporting the DNI’s assertion of privilege, and asserting the NSA's statutory 

privilege, concerns information that may lend to confirm or deny whether or not AT&T and 

Verizon (or to the extent necessary whether or not any other telecom muni cat ions provider) has 

assisted the NSA with alleged intelligence activities, 50 The, Jewel plaintiffs and three of the 

Shuberl plaintiffs allege that they are customers of AT&T, and that AT&T participated in the 

alleged surveillance activities that the plaintiffs seek to challenge. Additionally, at least one 

Shuberl plaintiff also claims to be a customer of Verizon, and that Verizon similarly participated 

the existence of the NSA's investigation, or (he pen registers and/or trap and trace devices unless 
and until ordered by the Court/' 



i I i II' I III i|i 1 1 i On September 1 9, 2008, then-Altomey General 

Mukasey submitted a classified declaration and certification to this Court authorized by Section 
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in the alleged surveillance activities that the plaint ills seek to challenge. C onllmnation or denial 

of a relationship between the NSA and A l &T. Veri/on. or any other telecommunication carrier 
on alleged intelligence activities would cause exceptionally grave damage to national security. 
Confirming or denying such allegations of assistance would reveal to foreign adversaries 
whether or not NSA utilizes particular intelligence sources and methods and. thus, either 
compromise actual sources and methods or reveal that NSA does not utilize a particular source 
and method. Such facts would allow individuals, to include America’s adversaries, to 
accumulate information and draw conclusions about how the U.S. Government collects 
communications, its technical capabilities, and its sources and methods. Any U.S, Government 
confirmation or denial would replace speculation with certainty for hostile foreign adversaries 
who are balancing the risk that a particular channel of communication may not be secure against 
the need to communicate efficiently. Such confirmation or denial would allow adversaries to 
focus with certainty on a particular channel that is secure/ 1 

86. (U) Indeed- Congress recognized the need to protect the identities of 

telecommunications carriers alleged to have assisted the NSA when it enacted provisions of the 
FISA Amendments Act of 2008 that barred lawsuits against telecommunication carriers aJIeged 
to have assisted the NSA after the 9/1 1 attacks. In enacting this legislation, the Senate Select 
Committee on Intelligence, after extensive oversight of the Terrorist Surveillance Program, 
found that ^electronic surveillance for law enforcement and intelligence purposes depends in 



M (L i For example. if NSA were to admit publicly in response loan information request 
hat no reladonship with telecommunications companies A. B. and C exists, but in response to a 
separate information request about company D state only that no response could be made, this 
would give rise to the inference that NSA has a relationship with company D, Over time, the 
accumulation of these inferences would disclose the capabilities (sources and methods) of NSA's 
intelligence activities and inform our adversaries of the degree to which NSA can successfully 
exploit particular communications. Our adversaries can then develop countermeasures to thwart 
NSA's abilities to collect their communications. 
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great part on the cooperation of private coni parneMnat operate the nation's telecommunications 

system/' S. Rep, 1 10-209 (2007) at 9 (accompanying S. 2248, Foreign Intelligence Surveillance 
Act of )97S Amendments Act of 2008), Notably, the SSCI expressly stated that, in connection 
with alleged post-9/ 1 1 assistance, "if would be inappropriate to disclose the names of the 
electronic communication service providers from which assistance was sought, the activities in 
which the Government was engaged or in which the providers assisted, or the details regarding 
any such assistance/* Id. The Committee added that the "identities of persons or entities who 
provide assistance to the intelligence community are properly protected as sources and methods 
ol intelligence.^ Id. 
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V1K (U) Risks of Allowing Litigation to Proceed 

1 12, ( T i //' l>i 1 T po n examination of the allegations, claims, 

facts, and issues raised by these eases, it is my judgment that sensitive state secrets are so central 
to the subject matter of the litigation that any attempt to proceed will substantially risk the 
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disclosure of the privileged state secrets described above. Although plaintiffs' alleged content 

surveillance "dragnet'* did not and does not occur, proving why that is so. j 

■ wout ■ ■ ■ i ■_ _'ly 1 1 n p i i c a I c 

highly classified intelligence information and activities. Similarly, attempting lo address 
plaintiffs" allegations with respect to the bulk collection of non-content information and records 
containing transactional meta data about communications would also compromise currently 
operative NSA sources and methods that are essential to protecting national security, including 
for delecting and preventing a terrorist attack. | 

I In n i y j u d g ? r i c nt. an \ • c ; 1 i ■ n \ o p ro I) e 1 1 1 c 

outer bounds of such classified informaiioit would pose inherent and significant risks of the 
disclosure of that information, including critically sensitive information about NSA sources, 
methods, operations, targets, and relationships. Indeed, any effort merely to allude to those facts 
in a non-classified fashion could be reveal ing of classified details that should not be disclosed. 
Even seemingly minor or innocuous facts, in the context of these cases or other non-class i Red 
information, can tend to reveal, particularly to sophisticated foreign adversaries, a much bigger 
picture of U.S. intelligence gathering sources and methods. 

I 13. (TS//Sl/fl tfSfrThe United States has an overwhelming interest in detecting and 
thwarting further mass casualty attacks by a) Qaeda and other terrorist organizations. The United 
States has already suffered one massive attack that killed thousands, disrupted the Nation's 
financial center for days, and successfully struck at the command and control center for the 
Nation's military. Al Qaeda and other terrorist groups continue to pursue the ability and have 
clearly stated an intent to carry out a massive attack in the United Stales that could result in a 
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significant loss of life as well as have a dc\ aMaun^mpact on the U.S. economv. 

I 14. As set forth above, terrorist organizations around the world seeks to 

use our own communications infrastructure against us as they secretly attempt to infiltrate agents 
into the l nited States, wailing to attack at a lime of their choosing. One of the greatest 
challenges the United Stales confronts in the ongoing effort to prevent another catastrophic 
terrorist attack against the Homeland is the critical need to gather intelligence quickly and 
effectively. Time is of the essence in presenting terrorist attacks, and the government faces 
significant obstacles in finding and tracking terrorist operatives as they manipulate modem 
technology in an attempt to communicate while remaining undetected. The NS \ sources, 
methods, and activities described herein are vital tools in this effort. 

VIII. (U) Conclusion 

I 15. (U) In sum. I support the DNI*s assertion of the state secrets privilege and 

statutory privilege to prevent (he disclosure of the information described herein and detailed 
herein. 1 also assert a statutory privilege under Section 6 ol the National Security Agency Act 
with respect to the information described herein which concerns the functions and activities of 
the NSA. Moreover, because proceedings in this case risk disclosure of privileged and classified 
intelligence-related information. I respectfully request that the Court not only protect that 
information from disclosure but also dismiss this case to prevent exceptional harm to the national 
security of the l nited States. 

I declare under penally of perjury that the foregoing is true and correct. 
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Frances J. Fleisch 
Executive Director 
National Security Agency 
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